2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4622 | MEDIUM | 5.4 | 0.5% | Feb 21, 2023 | The Login Logout Menu WordPress plugin through 1.3.3 does not validate and escape some of its shortcode attributes befor... |
| CVE-2022-4386 | MEDIUM | 4.3 | 0.3% | Feb 21, 2023 | The Intuitive Custom Post Order WordPress plugin before 3.1.4 lacks CSRF protection in its update-menu-order ajax action... |
| CVE-2022-4385 | MEDIUM | 4.3 | 0.5% | Feb 21, 2023 | The Intuitive Custom Post Order WordPress plugin before 3.1.4 does not check for authorization in the update-menu-order ... |
| CVE-2022-3901 | MEDIUM | 6.1 | 0.4% | Feb 20, 2023 | Prototype Pollution in Visioweb.js 1.10.6 allows attackers to execute XSS on the client system. |
| CVE-2022-48320 | MEDIUM | 4.3 | 0.2% | Feb 20, 2023 | Cross-site Request Forgery (CSRF) in Tribe29's Checkmk <= 2.1.0p17, Checkmk <= 2.0.0p31, and all versions of Checkmk 1.6... |
| CVE-2022-48319 | MEDIUM | 5.5 | 0.2% | Feb 20, 2023 | Sensitive host secret disclosed in cmk-update-agent.log file in Tribe29's Checkmk <= 2.1.0p13, Checkmk <= 2.0.0p29, and ... |
| CVE-2022-48318 | MEDIUM | 5.3 | 0.5% | Feb 20, 2023 | No authorisation controls in the RestAPI documentation for Tribe29's Checkmk <= 2.1.0p13 and Checkmk <= 2.0.0p29 which m... |
| CVE-2022-40348 | MEDIUM | 5.4 | 0.8% | Feb 18, 2023 | Cross Site Scripting (XSS) vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'name' and 'em... |
| CVE-2022-48115 | MEDIUM | 6.1 | 0.4% | Feb 17, 2023 | The dropdown menu in jspreadsheet before v4.6.0 was discovered to be vulnerable to cross-site scripting (XSS). |
| CVE-2022-43579 | MEDIUM | 5.4 | 0.4% | Feb 17, 2023 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 is vulnerable to cross-... |
| CVE-2022-36775 | MEDIUM | 6.5 | 0.4% | Feb 17, 2023 | IBM Security Verify Access 10.0.0.0, 10.0.1.0, 10.0.2.0, 10.0.3.0, and10.0.4.0 is vulnerable to HTTP header injection, c... |
| CVE-2022-44299 | MEDIUM | 4.9 | 0.8% | Feb 16, 2023 | SiteServerCMS 7.1.3 sscms has a file read vulnerability. |
| CVE-2022-0637 | MEDIUM | 6.1 | 0.4% | Feb 16, 2023 | open redirect in pollbot (pollbot.services.mozilla.com) in versions before 1.4.6 |
| CVE-2022-48327 | MEDIUM | 6.1 | 0.6% | Feb 16, 2023 | Multiple Cross Site Scripting (XSS) vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects t... |
| CVE-2022-48326 | MEDIUM | 6.1 | 0.6% | Feb 16, 2023 | Multiple Cross Site Scripting (XSS) vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects t... |
| CVE-2022-48325 | MEDIUM | 6.1 | 0.6% | Feb 16, 2023 | Multiple Cross Site Scripting (XSS) vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects t... |
| CVE-2022-48324 | MEDIUM | 6.1 | 0.6% | Feb 16, 2023 | Multiple Cross Site Scripting (XSS) vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects t... |
| CVE-2022-41614 | MEDIUM | 5.5 | 0.2% | Feb 16, 2023 | Insufficiently protected credentials in the Intel(R) ON Event Series Android application before version 2.0 may allow an... |
| CVE-2022-38090 | MEDIUM | 4.4 | 0.3% | Feb 16, 2023 | Improper isolation of shared resources in some Intel(R) Processors when using Intel(R) Software Guard Extensions may all... |
| CVE-2022-38056 | MEDIUM | 5.3 | 0.1% | Feb 16, 2023 | Improper neutralization in the Intel(R) EMA software before version 1.8.1.0 may allow a privileged user to potentially e... |
| CVE-2022-36797 | MEDIUM | 5.5 | 0.2% | Feb 16, 2023 | Protection mechanism failure in the Intel(R) Ethernet 500 Series Controller drivers for VMware before version 1.10.0.1 m... |
| CVE-2022-36382 | MEDIUM | 4.4 | 0.2% | Feb 16, 2023 | Out-of-bounds write in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 1... |
| CVE-2022-36289 | MEDIUM | 5.5 | 0.2% | Feb 16, 2023 | Protection mechanism failure in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to... |
| CVE-2022-36287 | MEDIUM | 4.3 | 0.2% | Feb 16, 2023 | Uncaught exception in the FCS Server software maintained by Intel before version 1.1.79.3 may allow a privileged user to... |
| CVE-2022-35883 | MEDIUM | 5.5 | 0.2% | Feb 16, 2023 | NULL pointer dereference in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to pot... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now